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SOFTWARE MANAGEMENT SYSTEM 

BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to a software 
management system comprising a network system which 
includes a center server and a local server connected to 
the center server via a wide-area network, such that the 
center server manages the whole wide-area network. More 
particularly, the invention relates to a software 
management system which features an improved function 
for downloading the application software from the center 
server onto the local server maintaining improved 
reliability. 

Prior Art 

Use of a wide-area network such as internet is 
ever spreading in recent years. Further, the widespread 
use of "Java" which is a network-directed program 
language, is requiring an increased amount of processing 
for downloading the softwares from the center server 
onto a local server (computer, etc.) via a wide-area 
network. 

Besides, in recent years, even a computer having a 
relatively small memory capacity, such as a built-in 
type local server, is requiring a mechanism for 
downloading the application software. 

However, the local server of the built-in type 
having a small memory capacity is not often capable of 
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placing all applications on the memory at all times. 
Besides, the local server of the built-in type has not 
been equipped with an auxiliary storage unit such as 
disk and must, hence, be equipped with a function for 
downloading the software as required and for deleting 
the software when it is no longer necessary. 

The above-mentioned remote software management 
function has heretofore been standardized under OSG 
(Open Gateway Service) determined by, for example, OGSi 
(Open Gateway Service Initiative) ( for details, see 
Website "http://www.osgi.org/" of OGSi). 

The OSG standard specifies the system for 
downloading and deleting the software. When the system 
requires higher reliability, however, a mechanism must 
be devised and furnished to guarantee a highly reliable 
function and a safe and reliable operation. 

For example, "a network management method and a 
system therefor" disclosed in Japanese Unexamined Patent 
Publication (Kokai) No. 11-65968) is the one in which a 
system based on a manager agent model specified under 
"M. 3 010" recommended by ITU-T is furnished with a 
mechanism for downloading a software described in Java . 

The network management system described in the 
above publication is based on the manager agent model 
specified under "M. 3010" recommended by ITU-T, but 
gives no attention to the processing of when the 
operation of the software itself described in Java 
becomes abnormal or to the contrivance for improving 
reliability. 
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That is, in the conventional remote software 
management systems via the network, the basic functions 
for downloading and deletion have been specified, but no 
consideration has been given to the functions for 
improving the reliability of the system, such as the 
processing for coping with the abnormal operation of the 
software that is downloaded or the mechanism for 
guaranteeing safe and reliable operation. 

When a consideration is given to that the 
softwares may be further delivered via the network in 
the future, it needs not be pointed out that it becomes 
very necessary to maintain safety of the software that 
is downloaded and to cope with the abnormal operation 
that may happen. However, no conventional system is 
capable of coping with the demand to a sufficient 
degree . 

As described above, the conventional software 
management system is capable of neither meeting the 
requirement for maintaining safety of the software that 
is downloaded nor coping with abnormal operation that 
may happen. 

SUMMARY OF THE INVENTION 

The present invention was accomplished in order to 
solve the above-mentioned problem, and has the object of 
providing a function which guarantees safe and reliable 
operation of the software that is downloaded through a 
network, and supports the collection of fault data and 
restoration even in case an abnormal condition has 
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occurred, and of obtaining a software management system 
for processing/ maintaining improved reliability, a 
software delivered on a wide-area network. 

A software management system according to the 
present invention comprises a network system which 
includes a center server and a local server connected to 
the center server via a wide-area network, wherein: the 
center server includes; an application that operates 
upon being downloaded onto the local server; a script 
describing the operation of the application; and a fault 
countermeasure means for coping with the occurrence of a 
fault; and the local server includes : a network-directed 
language execution environment; a remote management 
means for downloading the application from the center 
server, and for deleting the application after the 
processing has been finished; a script interpretation 
means for interpreting the script and for requesting the 
application to execute the processing; and a highly 
reliable means for recording event data that occur while 
the application is being executed, for managing the data 
when the fault has occurred, and for executing the 
restoration processing. 

In the software management system of the 
invention, the remote management means includes: center 
server data and application data; a request processing 
means that works in response to a request for executing 
the application; an application downloading means for 
downloading the application from the center server based 
upon the center server data and the application data; 
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and an application management means for executing the 
processing for driving or deleting the application based 
on the application data. 

In the software management system of the 
invention, the script interpretation means includes: a 
script definition and a list of events; an 
interpretation means for interpreting the script in 
accordance with the script definition and for outputting 
an event corresponding to the content of definition of 
the script; and an event drive means for fetching the 
event and for picking up a processing that is driven by 
the event according to the list of events. 

In the software management system of the 
invention, the script is described in XML (extensible 
markup language), and the script definition is described 
in DTD (document type definition). 

In the software management system of the 
invention, the fault countermeasure means includes: a 
fault data-obtaining means for obtaining fault data from 
the local server in case fault has occurred; and a fault 
countermeasure-notifying means for determining the 
countermeasure against the fault in case the fault has 
occurred and for notifying it to the local server; and 
the highly reliable means includes: a fault detector 
means for detecting the occurrence of a fault that has 
occurred; a fault data correction means for correcting 
the fault data when the fault has occurred; a fault- 
notifying means for notifying the fault data to the 
center server; a restoration means for restoring the 
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fault relying upon the countermeasure against the fault 
from the center server; and an event collection means 
for correcting and recording the event data. 

In the software management system of the 
invention, the fault countermeasure means includes: a 
list of fault countermeasures f storing countermeasures 
against faults for each of the kinds of the fault data; 
and the fault countermeasure-notif ying means includes: a 
fault countermeasure detector means for detecting a 
countermeasure against fault corresponding to the kind 
of the fault data based upon a list of the fault 
countermeasures; and a notifying means for notifying the 
countermeasure against fault to the local server. 

In the software management system of the 
invention, the fault countermeasure means includes: a 
fault data-obtaining means for obtaining fault data of 
when the fault has occurred from the local server; and 
the highly reliable means includes: 

a fault detector means for detecting the 
occurrence of a fault; a fault data collection means for 
collecting fault data of when the fault has occurred; a 
restoration means for autonomously coping with the 
occurrence of a fault to automatically restore the 
fault; a notifying means for notifying the fault data 
and the data of automatic restoration to the center 
server; and an event collection means for collecting and 
recording the event data. 

In the software management system of the 
invention, the local servers exist in a plural number, 
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each of which including the network-directed language 
execution environment, the remote management means, the 
script interpretation means and the highly reliable 
means . 

In the software management system of the 
invention, the center servers exist in a plural number, 
each of which including the application, the script and 
the fault countermeasure means . 

In the software management system of the 
invention, the local servers exist in a plural number, 
at least one of which including the network-directed 
language execution environment, the remote management 
means , the script interpretation means and the highly 
reliable means, and other local servers including the 
network-directed language execution environment, the 
remote management means and the script interpretation 
means . 

A software management system according to the 
present invention comprises a network system which 
includes a center server and a local server connected to 
the center server via a wide-area network, wherein: the 
center server includes; an application that operates 
upon being downloaded onto the local server; and a 
script describing the operation of the application; and 
the local server includes: a network-directed language 
execution environment; a remote management means for 
downloading the application from the center server, and 
for deleting the application after the processing has 
been finished; and a script interpretation means for 



7 



interpreting the script and for requesting the 
application to execute the processing. 

In the software management system of the 
invention, the local servers exist in a plural number, 
each of which including the network-directed language 
execution environment, the remote management means and 
the script interpretation means. 

A software management system according to the 
present invention comprises a network system which 
includes a center server and a local server connected to 
the center server via a wide-area network, wherein: the 
center server includes; an application that operates 
upon being downloaded onto the local server; and a fault 
countermeasure means for coping with the occurrence of a 
fault; and the local server includes: a network-directed 
language execution environment; a remote management 
means for downloading the application from the center 
server, and for deleting the application after the 
processing has been finished; and a highly reliable 
means for recording event data that occur while the 
application is being executed, for managing the data 
when the fault has occurred, and for executing the 
restoration processing. 

In the software management system of the 
invention, the local servers exist in a plural number, 
each of which including the network-directed language 
execution environment, the remote management means and 
the highly reliable means. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram illustrating the 
constitution of an embodiment 1 of the present 
invention; 

Fig. 2 is a flowchart illustrating the operation 
according to the embodiment 1 of the present invention; 

Fig. 3 is a block diagram illustrating the 
constitution of an embodiment 2 of the present 
invention; 

Fig. 4 is a flowchart illustrating the operation 
according to the embodiment 2 of the present invention; 

Fig. 5 is a block diagram illustrating the 
constitution of a major portion according to an 
embodiment 3 of the present invention; 

Fig. 6 is a diagram illustrating a script 
definition according to the embodiment 3 of the present 
invention ; 

Fig. 7 is a diagram illustrating a list of events 
according to the embodiment 3 of the present invention; 

Fig. 8 is a flowchart illustrating the operation 
according to the embodiment 3 of the present invention; 

Fig. 9 is a diagram illustrating an example of 
description services according to an embodiment 4 of the 
present invention; 

Fig. 10 is a diagram illustrating an example of 
description services according to the embodiment 4 of 
the present invention; 

Fig. 11 is a block diagram illustrating the 
constitution of an embodiment 5 of the present 
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invention; 

Fig. 12 is a flowchart illustrating the operation 
according to the embodiment 5 of the present invention; 

Fig. 13 is a block diagram illustrating the 
constitution of an embodiment 6 of the present 
invention; 

Fig. 14 is a flowchart illustrating the operation 
according to the embodiment 6 of the present invention; 

Fig. 15 is a block diagram illustrating the 
constitution of an embodiment 7 of the present 
invention ; 

Fig. 16 is a flowchart illustrating the operation 
according to the embodiment 7 of the present invention; 

Fig. 17 is a block diagram illustrating the 
embodiment 8 



constitution of 
invention; 

Fig. 18 is 
constitution of 
invention; 

Fig. 19 is 
constitution of 
invention ; and 

Fig. 20 is 



an 



of the 



present 



constitution 
invention; 



a block diagram illustrating the 

an embodiment 9 of the present 

a block diagram illustrating the 

an embodiment 10 of the present 

a block diagram illustrating the 

of an embodiment 11 of the present 



DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Embodiment 1 . 

An embodiment 1 of the present invention will now 
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be described in detail with reference to the drawings. 

Fig. 1 is a block diagram schematically 
illustrating the constitution according to the 
embodiment 1 of the present invention. 

In Fig. 1, a center server 1 includes an 
application 11, a script 12 describing the operation of 
the application, and a fault countermeasure means 13 
which copes with the occurrence of a fault. 

As will be described later, the application 11 
includes plural applications 11a to llx, and the script 
12 includes plural scripts 12a to 12x corresponding to 
the applications 11a to llx. 

A wide-area network 2 connects the center server 1 
to a local server 3. 

The application 11 in the center server 1 is 
downloaded onto the local server 3 through the wide-area 
network 2 and is operated. 

The local server 3 includes the applications 11a 
to llx that are downloaded from the center server 1 as 
required, a network-directed language execution 
environment 31 comprising Java VM, a remote management 
means 32, a script interpretation means 33, and a highly- 
reliable means 34 . 

The remote management means 32 executes the 
processing such as downloading of the application 11 
from the center server 1 and the deletion after the 
processing has been finished. 

The highly reliable means 34 records event data 
that occur while the application 11 is being executed, 
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manages the data when a fault has occurred, and executes 
the restoration processing. 

A local network 4 connects the local server 3 to 
equipment 5 that are to be managed. 

Next, described below is the operation of the 
whole system of the embodiment 1 of the invention shown 
in Fig. 1. 

First, among the applications that have been 
registered in the center server 1, the applications 11a 
to llx necessary for the local server 3 are downloaded 
onto the local server 3 through the wide-area network 2 . 

The downloaded applications 11a to llx execute the 
processing such as controlling the equipment 5 and 
fetching the data in the equipment 5 that are to be 
managed being connected via the local network 4 . 

Next, operation of the embodiment 1 of the 
invention of Fig. 1 will be concretely described with 
reference to a flowchart of Fig. 2. 

That is, described below are a mechanism of a safe 
and reliable operation of a software that is downloaded 
and a mechanism for coping with the abnormal condition 
that may occur. 

Here, the network-directed software execution 
environment 31 that operates being downloaded from the 
center server 1 has been established by taking into 
consideration the "Java" execution environment "Java VM 
(Java Virtual Machine)" that has now been most 
widespread. 

Here, it needs not be pointed out that the 
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equivalent effect is exhibited even by those other than 
"Java VM", provided they have functions of the same 
kind. 

In Fig. 2, first, the application is downloaded 
from the center server 1 onto the local server 3 by the 
remote management means 3 2 in the local server 3 (step 
SI). 

The downloaded application 11 assumes the standby 
state until the request of processing is issued from the 
script interpretation means 33 (step S2). 

Here, when a processing is requested for the 
application 11, when it is judged at step S2 that the 
processing is requested (i.e., YES) and when the request 
of processing is input to the remote management means 
32, then, the application 11 starts from this moment 
(step S3 ) . 

Here, the script 12 corresponding to the request 
of processing is downloaded onto the local server 3 from 
the center server 1, and the content of the processing 
is interpreted by the script interpretation means 33 in 
the local server 3 . 

Further, the script interpretation means 33 sends 
the request of processing in compliance with the 
interpreted content of processing to the application 11 
to have it execute the processing (step S4). 

Thus, the application 11 is executed via the 
script 12 in order to safely and reliably execute the 
operation. 

That is, the application 11 verifies the operation 
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at the time of being registered to the center server 1. 
At this moment, if the operation of the application 11 
is defined by the script 12, the range of operation is 
determined, and the operation is not executed outside 
the range described in the script 12. 

Further, if all operation range is defined by the 
script 12, the operation needs be verified only within 
the range described in the script 12, making it possible 
to execute efficient and reliable verification. 

Accordingly, every operation can be verified in 
advance to guarantee the safety in executing the 
application 11. 

Further, since only the operation described in the 
script 12 is executed, the specification becomes clear 
making it possible to reliably confirm the required 
operation. 

Various events are issued from the application 11 
for which the processing is requested and which is in 
operation or from a system such as OS. 

Reverting to Fig. 2, the highly reliable means 34 
detects an event that is issued and records it therein 
as event data (step S5). 

Next, the highly reliable means 34 judges whether 
the event that is issued is faulty (step S6). When it 
is so judged that the event is faulty (i.e., YES), not 
only the processing for accumulating the event data is 
executed (step S5) but also the processing is executed 
to cope with the fault (step S7) in compliance with a 
predetermined procedure, and the routine proceeds to 
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step S8. 

When it is judged at step S6 that the event is not 
faulty (i.e., NO) , the routine readily proceeds to step 
S8. 

At step S8, it is judged whether the processing is 
all finished. When it is judged that the processing is 
all finished (i.e., YES), the processing routine of Fig. 
2 ends, and the request of processing the next 
application 11 is waited for. 

When it is judged at step S8 that the processing 
has not all been finished (i.e., NO), the routine 
returns back to step S5 of recording the event data, and 
the above-mentioned processing is repeated. 

Thus, the highly reliable means 34 records the 
event data issued by the application 11 that is in 
operation (step S5), and executes a necessary 
countermeasure processing upon detecting abnormal 
condition in the application 11 (step S7 ) . 

Owing to this function, a suitable countermeasure 
processing is executed even in case an abnormal 
condition occurs during the operation, and the system 
does not lose its function. 

Embodiment 2 . 

The above embodiment 1 did not closely describe 
the remote management means 32 in the local server 3. 
However, the remote management means 32 may be 
constituted as shown in Fig. 3. 

Described below with reference to Fig. 3 is an 
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embodiment 2 of the present invention embodying the 
remote management means 32. 

Fig. 3 is a block diagram of a constitution for 
concretely illustrating the function of the remote 
management means 32 in the local server 3, and wherein 
the same portions as those described above (see Fig. 1) 
are denoted by the same reference numerals but are not 
described again. 

Fig. 3 does not illustrate those constitutions 
that are not directly related to the remote management 
means 32, such as local network 4 and equipment 5 to be 
managed. 

In the center server 1, further, the script 12a 
and the application 11a only are representatively shown. 

The remote management means 32 includes center 
server data 321, application data 322, request 
processing means 323, application downloading means 324 
and application management means 325. 

The request processing means 323 responds to the 
request of execution of the application 11 issued from 
the script interpretation means 33. 

The application downloading means 324 downloads 
the application 11 from the center server 1 based upon 
the center server data 321 and the application data 322. 

The application management means 325 executes the 
processing such as starting or deleting the application 
11 based upon the application data 322. 

The operation of the embodiment 2 of the present 
invention of Fig. 3 will now be concretely described 
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with reference to a flowchart of Fig. 4. 

The operation of the system is the same as the one 
described above. Therefore, the following description 
gives attention to the processing operation only in the 
remote management means 32. 

First, when the script interpretation means 33 
issues the request for starting the application 11a, the 
request for starting the application 11a is input to the 
request processing means 323 in the remote management 
means 32 (step Sll). 

Next, it is judged whether there is the 
application 11a that is to be started (step S12). When 
it is judged that the application 11a does not exist in 
the local server 3 (i.e., NO), the application 
downloading means 324 receives a request from the 
request processing means 323 and makes access to the 
center server 1 based upon the center server data 321 
(step S13) . 

Thus, the application 11a that is to be started is 
downloaded from the center server 1 based upon the 
application data 322 (step S14). 

The application data 322 may exist in the center 
server 1 instead of in the local server 3. 

In a state where the application 11a exists in the 
local server 3, the request processing means 323 starts 
the application 11a (step S15). 

When it is judged at step S12 that the application 
11a to be started exists in the local server 3 (i.e., 
YES), the routine readily proceeds to step S15. 
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After step S15, the script 12a describing the 
processing of the application 11a is read from the 
center server 1 and is sent to the script interpretation 
means 33 to have the application 11a execute the 
processing (step S16). 

The actual operation of the application 11a is 
executed according to the content of the script 12a. 

Next, it is judged whether the processing of the 
application 11a has been finished (step S17). When it 
is judged that the processing has not been completed 
(i.e., NO), the processing of step S16 is repeated. 

When it is judged at step S17 that the processing 
of the application 11a has been finished (i.e., YES), it 
is, then, judged whether the application is of the 
resident type or not (transient type) (step S18) . 

When it is judged at step S18 that the application 
11a is of the transient type (i.e., NO), the application 
11a is deleted (step S19), and the processing routine of 
Fig. 4 ends. 

When it is judged at step S18 that the application 
11a is of the resident type (i.e., YES), the processing 
routine of Fig. 4 readily ends, and the application 11a 
stays in the memory. 

As described above, the remote management means 3 2 
makes it possible to efficiently download the software. 

Upon deleting the transient-type application 11 
after every operation, further, even the local server 3 
having a small memory capacity is allowed to operate the 
system without limited by the processing. 
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Embodiment 3 . 

The above embodiment 1 did not closely describe 
the script interpretation means 33 in the local server 
3. However, the script interpretation means 33 may be 
constituted as shown in Figs. 5 to 7. 

Described below with reference to Figs. 5 to 7 is 
an embodiment 3 of the present invention embodying the 
script interpretation means 33. 

Fig. 5 is a block diagram of a constitution for 
concretely illustrating the function of the script 
interpretation means 33 in the local server 3, and 
illustrates only the peripheral constitution of the 
script interpretation means 33. 

The constitution that is not shown in Fig. 5 is 
the same as the one described above (see Figs. 1 and 3). 
In Fig. 5, the script interpretation means 33 includes a 
script definition 331, a list 332 of events, an 
interpretation means 333 and an event drive means 334. 

The interpretation means 333 includes a script 
definition 331, interprets the script 12 according to 
the script definition 331, and outputs an event 
corresponding to the content of the definition of the 
script 12. 

The event drive means 334 includes a list 332 of 
events, fetches the events, and picks up the processing 
driven by the event according to the list 332 of events. 

Fig. 6 is a diagram illustrating an example of the 
script definition 331 according to the embodiment 3 of 
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the present invention, and Fig. 7 is a diagram 
illustrating a list 33 2 of events according to the 
embodiment 3 of the present invention. 

In Fig. 6, the script definition 331 stores, in 
the form of a map, the events corresponding to the 
contents of definitions in the script 12a and shows, for 
example, an event A which corresponds to the content of 
definition <script a>. 

In Fig. 7, the list 332 of events is storing, in 
the form of a map, the applications and the processing 
portions corresponding to the events and shows, for 
example, an application 11a and a processing portion A 
corresponding to an event A. 

Next, the operation of the embodiment 3 of the 
invention shown in Figs. 5 to 7 will be described with 
reference to a flowchart of Fig. 8. 

The following description gives attention to only 
the processing of the script interpretation means 33. 

First, due to the interposition of the remote 
management means 32 (see Figs. 1 and 3), the local 
server 3 reads the script 12a in the center server 1 
into the interpretation means 333 in the script 
interpretation means 33 (step S21). 

Next, the interpretation means 333 picks up the 
event A corresponding to the content of definition 
<script a> according to the script definition 331 (step 
S22) . 

Then, the event drive means 334 picks up the 
processing (application 11a, processing A) corresponding 
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to the event A according to the list 332 of events (step 
S23) and requests the application 11a to execute the 
processing (step S24). 

As a result, the script interpretation means 33 
flexibly defines the specifications of the script 12 for 
safely and reliably executing the processing. 

That is, owing to the script definition 331, the 
script 12 can be defined in a form independent from the 
processing. 

The script 12 itself can be so specified as to 
define the pure meaning of the processing without 
limited by the specifications of the network 
constituting the system, hardware and software. 

The script definition 331 crosslinks the script 12 
that is meaningfully specified with the real system, and 
defines the correspondence between the description in 
the script 12 and the event based on the specifications 
of the system. 

On the other hand, the list 332 of events 
crosslinks the event based on the specifications of the 
system with the mounting of the software that really 
operates, expands the degree of freedom in designing the 
software relying on the above-mentioned constitution, 
and makes it possible to freely fabricate the 
constitution of the software corresponding to a given 
event . 

For a local server 3 having a small memory 
capacity, for example, a software that uses less memory 
is mounted. For a local server 3 for which the 
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processing speed is demanded rather than warrying about 
the limitation on the memory capacity, on the other 
hand, a software which gives importance to performance 
is mounted. 

The mounting can be easily sorted by simply 
changing the list of events 332 in the local server 3. 

Embodiment 4 . 

The above embodiment 3 did not closely describe 
the form of description of the script 12 and of the 
script definition 331. They, however, may be described 
in a manner as shown in Figs. 9 and 10. 

Described below with reference to Figs. 9 and 10 
is an embodiment 4 of the present invention embodying 
the form of describing the script 12 and the script 
definition 331. 

Figs. 9 and 10 are diagrams illustrating the 
description of services of the script 12 and the script 
definition 331. 

In Fig. 9, the script 12 handled in the script 
interpretation means 33 (see Fig. 5) is described in XML 
(extensible markup language). 

In Fig. 10, the script definition 331 in the 
interpretation means 333 is described in DTD (document 
type definition) to correspond to the XML document. 

When the script 12 describing the operation of the 
application 11 is given by the XML as shown in Fig. 9, a 
general-purpose XML parser is used in the script 
interpretation means 33. 
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In this case, use of SAX (simple API for XML) 
which is a standard specification of the parser makes it 
possible to pick up events such as start and end of a 
tag. 

In the case of the air conditioner control service 
described as shown in Figs. 9 and 10, events are 
successively picked up, such as start of air conditioner 
control, start of initialization, start of air 
conditioner initialization, setting of temperature, 
setting of the wind velocity, end of air conditioner 
initialization, start of temperature sensor 
initialization . 

Further, the event drive means 334 in the script 
interpretation means 33 executes the corresponding 
processing based upon the list of events 332. 

Upon defining the tag of XML for every event that 
occurs, as described above, it is allowed to pick up the 
event from the script 12 (XML document) by using a 
standard XML parser. 

By describing the script definition 331 in the 
interpretation means 333 in the DTD form (see Fig. 10) 
corresponding to XML, further, correctness of the XML 
document (script 12) can be verified based on the 
function of the XML parser. 

That is, upon verifying the DTD, it is allowed to 
guarantee that the script 12 has been correctly 
described. 

Embodiment 5 . 
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The above embodiment 1 has closely described 
neither the fault counte measure means 13 in the center 
server 1 nor the highly reliable means 34 in the local 
server 3. However, the fault countermeasure means 13 
and the highly reliable means 34 may be constituted as 
shown in Fig. 11. 

Described below with reference to Fig. 11 is an 
embodiment 5 of the present invention embodying the 
fault countermeasure means 13 and the highly reliable 
means 34. 

Fig. 11 is a block diagram of a constitution for 
concretely illustrating the functions of the fault 
countermeasure means 13 and the highly reliable means 
34, and wherein the constitution that is not shown is 
the same as the one described above (see Fig. 1). 

In Fig. 11, the fault countermeasure means 13 
includes a fault data-obtaining means 131 for obtaining 
data related to a fault that has occurred from the local 
server 3, and a fault count ermeasure-not if ying means 13 2 
for determining the countermeasure against the fault 
that has occurred and for notifying the fault 
countermeasure to the local server 3. 

The highly reliable means 34 includes fault data 
341, event data 342, a fault detector means 343, a fault 
data collection means 344, a fault-notifying means 345, 
a restoration means 346 and an event collection means 
347. 

The fault detector means 343 detects the 
occurrence of fault, the fault data collection means 344 
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collects the fault data 341 of when fault has occurred, 
and the fault-notifying means 345 informs the center 
server 1 of the fault data 341. 

The restoration means 346 restores the fault in 
response to the fault countermeasure from the center 
server 1. 

The event collection means 347 collects and 
records the event data 342. 

Next, the operation of the embodiment 5 of the 
invention will be described with reference to a 
flowchart of Fig. 12. 

The following description gives attention to the 
cooperation processing of the fault countermeasure means 
13 in the center server 1 and the highly reliable means 
34 in the local server 3. 

In Fig. 12, first, when an event occurs from the 
application 11 or the system (OS in the local server 3, 
etc.) (step S31), the event collection means 347 in the 
highly reliable means 34 collects the event that has 
occurred and judges whether the event is the one related 
to the fault (step S32). 

When it is judged at step S32 that the event that 
is collected is a normal event which is not related to 
the fault (not the event under the abnormal 
condition) ( i.e . , NO), the event is recorded as event 
data 342 (step S33), and the processing routine of Fig. 
12 ends. 

On the other hand, when it is judged at step S3 2 
that the event that is collected is related to the fault 
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(event under the abnormal condition) (i.e. , YES), the 
fault detector means 343 is informed of the occurrence 
of the fault (step S34). 

The fault detector means 343 examines the event of 
under abnormal condition, specifies the kind of the 
fault (fault data), starts the fault data collection 
means 344 and stores the event as fault data 341 (step 
S35) . 

The thus detected fault data 341 is then sent to 
the center server 1 via the fault-notifying means 345 
(step S36) . 

In response thereto, the fault countermeasure 
means 13 in the center server 1 executes the following 
processing. 

That is, the fault data-obtaining means 131 
receives fault data 341 from the local server 3, and the 
fault countermeasure-notifying means determines a 
suitable countermeasure against the fault data 341 and 
sends it to the local server 3 (step S37). 

In response thereto, the highly reliable means 34 
in the local server 3 executes the processing by the 
restoration means 346. That is, the operation for 
restoration from the fault is executed based on the 
countermeasure sent from the center server 1 (step S38), 
and the processing routine of Fig. 12 ends. 

Thus, owing to the cooperation processing between 
the fault countermeasure means 13 in the center server 1 
and the highly reliable means 34 in the local server 3, 
it is allowed to prevent the whole system from 
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malfunctioning despite an abnormal condition has 
occurred. 

Further, the fault data 341 and the event data 342 
stored as logs in the local server 3 can be utilized for 
the subsequent system analysis and the like. Even in 
case the system as a whole comes into a halt, the 
analysis can be smoothly conducted. 

The fault data 341 is sent to the center server 1 
and may, hence, be stored in the center server 1 instead 
of in the local server 3 . 

Embodiment 6. 

The above embodiment 5 did not closely describe 
the fault countermeasure-notifying means 132 in the 
fault countermeasure means 13. However, the fault 
countermeasure-notifying means 132 may be constituted as 
shown in Fig. 13. 

Described below with reference to Fig. 13 is an 
embodiment 6 of the present invention embodying the 
fault countermeasure-notifying means 132 in the fault 
countermeasure means 13. 

Fig. 13 is a block diagram of a constitution for 
concretely illustrating the function of the fault 
countermeasure-notifying means 132, and wherein the 
constitution that is not shown is the same as the 
constitution described above (see Figs. 1 and 11). 

In Fig. 13, the fault countermeasure means 13 in 
the center server 1 is provided with a list 133 of 
countermeasures against the fault in addition to the 
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above-mentioned fault data-obtaining means 131 and the 
fault countermeasure-notifying means 132. 

The list 133 of countermeasures against fault 
stores, in the form of a map, the countermeasures 
against fault for each of the kinds of fault data in a 
manner that the kinds of the fault data are corresponded 
to the countermeasures against fault. 

The fault countermeasure-notifying means 132 
includes the fault countermeasure detector means 1321 
and the notifying means 1322. 

The fault countermeasure detector means 1321 
detects the countermeasure system corresponding to the 
kind of the fault data based upon the list 133 of 
countermeasures against fault. 

The notifying means 1322 informs the local server 
3 of the countermeasure against fault obtained from the 
list 133 of countermeasures against fault. 

Next, the operation of the embodiment 6 of the 
invention will be described with reference to a 
flowchart of Fig. 14. 

The following description gives attention to the 
fault countermeasure processing in the center server 1. 

In Fig. 14, the processings at steps S36 and S38 
are the same as those described above (see Fig. 12), and 
the processings at steps S31 to S35 that are not shown 
in Fig. 14 are the same as those of Fig. 12. 

When a fault occurs in the local server 3, fault 
data (kind) is sent to the center server 1 through the 
fault-notifying means 345 as described above (step S36). 
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The fault data-obtaining means 131 in the center 
server 1 receives fault data from the local server 3 
(step S371) and hands it over to the fault 
countermeasure detector means 1321 in the fault 
countermeasure-notifying means 132. 

The fault countermeasure detector means 1321 
detects the countermeasure corresponding to the kind of 
the fault data that is sent based upon the list 133 of 
countermeasures against fault (step S372). 

Then, the countermeasure-notifying means 1322 
transmits the detected countermeasure against fault to 
the restoration means 346 in the local server 3 (step 
S373) . 

Then, the restoration means 346 executes the 
processing corresponding to the countermeasure against 
fault (step S3 8) . 

Thus, the fault countermeasure means 13 in the 
center server 1 is provided with the fault 
countermeasure detector means 1321 that works based on 
the list 133 of countermeasures against fault, 
facilitating the designing to cope with fault in advance 
and guaranteeing safety of the whole system. 

The list 133 of the countermeasures against fault 
can be updated in real time and can readily be reflected 
in the system when the kinds of fault data are newly 
increased or when it is demanded to employ more 
efficient countermeasures against fault. 

Embodiment 7 . 
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In the above-mentioned embodiments 5 and 6, the 
fault countermeasure means 13 in the center server 1 was 
provided with the fault countermeasure-notifying means 
132, and the local server 3 was informed of the 
countermeasure corresponding to the kind of fault data. 
However, the highly reliable means 34 in the local 
server 3 may autonomously execute the countermeasures 
against fault. 

Described below with reference to Fig. 15 is an 
embodiment 7 of the present invention which autonomously 
executes the countermeasure against fault in the highly 
reliable means 34 . 

Fig. 15 is a block diagram of a constitution for 
concretely illustrating the function of the highly 
reliable means 34, wherein the same portions as those 
described above (see Figs. 1, 11 and 13) are denoted by 
the same reference numerals but are not described here 
again. 

In Fig. 15, the fault countermeasure means 13 in 
the center server 1 has the fault data-obtaining means 
131 but does not have the above-mentioned fault 
countermeasure-notifying means 132 (see Figs. 11 and 
13). 

The highly reliable means 34 in the local server 3 
includes the above-mentioned fault data 341, event data 
342, fault detector means 343, fault data collection 
means 344, event collection means 347, as well as 
restoration means 348 and notifying means 349. 

The restoration means 348 autonomously copes with 
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the fault that has occurred to restore from the fault. 

The notifying means 349 informs the fault data- 
obtaining means 131 in the center server 1 of the fault 
data 341 and of the data related to automatic 
restoration. 

Next, the operation of the highly reliable means 
34 according to the embodiment 7 of the present 
invention will be described with reference to a 
flowchart of Fig. 16. 

In Fig. 12, steps S31 to S35 are the same 
processings as those described above (see Fig. 12). 

In this case, the processings are the same as 
those described above from the occurrence of event (step 
S31) through up to the collection of fault data (step 
S35) . 

Hereinafter, the highly reliable means 34 in the 
local server 3 does not inform the center server 1 of 
the fault data but completes the automatic restoration 
processing for the fault in the local server 3 (step 
S39) . 

Finally, the fault data-obtaining means 131 in the 
center server 1 is informed of only the fault data 341 
and the result of automatic restoration (step S40), and 
the processing routine of Fig. 16 ends. 

This simplifies the functional constitution of the 
fault countermeasure means 13 in the center server 1, 
and the notifying processing (step S4 0) needs be 
effected only once for informing the center server 1 of 
the fault data 341 and the fault countermeasure from the 
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local server 3, reducing the amount of communication 
that flows into the wide-area network 2 . 

At the occurrence of fault, further, the 
restoration is readily completed in the local server 3 
making it possible to shorten the time for coping with 
the fault. 

This system for coping with the fault is effective 
for executing simple processing, such as when the degree 
of fault is very small, when the faulty application 11 
needs simply be re-started, etc. 

In the case of the fault that requires complex 
processing, therefore, the system for coping with the 
fault of the embodiment 5 or 6 can often be effectively 
utilized. 

Embodiment 8 . 

Though none of the embodiments 1 to 7 have 
referred to the number of the local servers 3 connected 
to the center server 1, plural local servers 3 may be 
connected to the center server 1. 

An embodiment 8 of the present invention in which 
plural local servers 3 are connected to the center 
server 1 will now be described with reference to Fig. 
17. 

Fig. 17 is a block diagram of the constitution 
illustrating the embodiment 8 of the present invention, 
wherein the same portions as those described above (see 
Fig. 1) are denoted by the same reference numerals but 
are not described again. 
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In Fig. 17, local servers 3a to 3n of a number of, 
for example, n are connected to the center server 1. 

Equipment 5a to 5n that are to be managed are 
connected to the local servers 3a to 3n of the same 
constitution via local networks 4a to 4n, respectively. 

Even in a system where there exist plural local 
servers 3a to 3n as shown in Fig. 17, the center server 
1, in theory, needs be employed in a number of only one. 
In this case, too, the basic operation is the same as 
the one described above, exhibiting the action and 
effect same as those described above. 

In a large-scale network-directed software 
distribution system, too, therefore, the reliability can 
be improved in the same manner as described above. 

Depending upon the scale of the system, the number 
of the center servers 1 may be increased to meet the 
scale of the system in order to decrease the burden 
exerted on each center server 1. 

When plural center servers 1 are provided, 
redundancy can be imparted to the center server 
function. Even in case any center server breaks down, 
therefore, other center servers work to back up, 
maintaining improved reliability. 

Embodiment 9. 

In the above-mentioned embodiment 1 , the center 
server 1 is provided with the fault countermeasure means 
13 and the local server 3 is provided with the highly 
reliable means 34. Here, however, the fault 
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count ermeasure means 13 and the highly reliable means 34 
may be omitted. 

Described below with reference to Fig. 18 is an 
embodiment 9 of the present invention omitting the fault 
count ermeasure means 13 and the highly reliable means 
34. 

Fig. 18 is a block diagram of a constitution 
illustrating the embodiment 9 of the present invention 
wherein the same portions as those described above (see 
Fig. 1) are denoted by the same reference numerals but 
are not described here again. 

Therefore, the operation of the embodiment 9 of 
the invention shown in Fig. 18 is the same as that of 
the above-mentioned flowchart (see Fig. 2) from which 
are deleted steps S5 to S8 that are related to the fault 
countermeasure means 13 and the highly reliable means 
34. 

In this case, the software operating in the local 
server 3 can be very simplified. 

The constitution of Fig. 18 is effective when the 
reliability can be maintained to a sufficient degree 
relying only upon the control operation by the script 
12. 

Thus, the software constitution of the local 
server 3 is simplified, and a highly reliable processing 
is realized even by using the local server 3 having a 
small memory capacity. 

Embodiment 1 0 . 
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Though the above-mentioned embodiment 9 did not 
refer to the number of the local servers 3 connected to 
the center server 1, plural local servers 3 may be 
connected to the center server 1 like in the above- 
mentioned embodiment 8 . 

An embodiment 10 of the invention in which plural 
local servers 3 are connected to the center server 1 
will now be described with reference to Fig. 19. 

In Fig. 19, plural local servers 3a to 3n are 
connected to the center server 1. 

Even in a system having plural local servers 3a to 
3n as shown in Fig. 19, the center server 1, in theory, 
needs be employed in a number of only one, and the basic 
operation is the same as described above. 

This makes it possible to improve the reliability 
even in a large-scale network-directed software 
distribution system in which there exist plural local 
servers 3 that execute simple processings. 

Embod iment 1 1 . 

In the above-mentioned embodiment 8 (see Fig. 17), 
the local servers 3 a to 3n connected to the center 
server 1 are all provided with highly reliable means 34a 
to 34n. However, only some of the local servers 3 may 
be provided with the highly reliable means 34, and the 
highly reliable means 34 may be omitted from other local 
servers 3 . 

Described below with reference to Fig. 20 is an 
embodiment 11 of the present invention in which only 
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some of the plural local servers 3 are provided with the 
highly reliable means 34. 

Fig. 20 is a block diagram of a constitution 
illustrating the embodiment 11 of the present invention, 
wherein the same portions as those described above (see 
Fig. 17) are denoted by the same reference numerals but 
are not described here again. 

Among plural local servers 3a to 3n in Fig. 20, 
some local servers 3a are not equipped with the highly 
reliable means 34 but other local servers 3n are 
equipped with the highly reliable means 34n. 

The basic operation of the embodiment 11 of the 
invention shown in Fig. 20 is the same as the one 
described above in connection with the local servers 3a 
to 3n. 

The constitution of Fig. 20 is effective in a 
system which contains local servers 3n that require the 
highly reliable means 34n and local servers 3a that do 
not require the highly reliable means 34. 

In this case, too, the center server 1 equipped 
with the fault countermeasure means 13 may, in theory, 
be provided in a number of only one, and the basic 
operation is the same as the one described above. 
Further, the number of the center servers 1 may be 
increased with an increase in the scale of the system. 

Thus, it is allowed to improve reliability of even 
a large-scale network-directed software distribution 
system which contains local servers 3a for executing 
simple processings and local servers 3n for execute 
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normal highly reliable processings. 

Embod iment 1 2 . 

In the above-mentioned embodiment 1, the center 
server 1 was provided with the script 12, and the local 
server 3 was provided with the script interpretation 
means 33. However, the script 12 and the script 
interpretation means 33 may be omitted. 

This can be effectively employed for a simple 
system that operates with the application 11 only, and 
the constitutions of the center server 1 and the local 
servers 3 can be simplified. 

In case a fault occurs, the count ermeasure 
exhibits the same action and effect as those described 
above . 

This can be further applied to a system in which 
plural local servers 3 are connected to the center 
server 1. 
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